Online Project Time Management System vulnerabilities

2 known vulnerabilities in Online Project Time Management System from Online Project Time Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Online Project Time Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-26627Apr 7, 2022Online Project Time Management System ProjectEPSS 1.52%

  Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.

• 9.8 Critical severity

  Online Project Time Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-26293Mar 16, 2022Online Project Time Management System ProjectEPSS 2.22%

  Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function save_employee at /ptms/classes/Users.php.